Anyone get bit by the Zeus Virus or another that had you enter SS#/DL#/ATM/PIN?

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
I always tell my friends never click on an email that comes from a credit card company or bank...instead type in the URL and log in.

However, apparently there is a malware/virus/browser hijack that detects you have logged into a secure site and takes over your browser window with what looks like it's coming from the website itself.

This is exactly one of the windows my friend got plus a similar one they think on either Capital One or Citi.

18463_virus_example1.gif


My question is obviously the ATM card would be compromised due to giving the PIN. They think the other website asked for 3-digit security code so obviously that credit card is compromised.

By having their SSN#, that is bad; but unless you can prove someone is using it actively nothing you can do really.

I told them to call their fraud department and cancel the cards, change all their passwords to something totally new and not going from "ILOVEJENNY1985" to "ILOVEJENNY1986" lolz.

They did the 90 day credit freeze (I thought they were all free, but one of the bureaus charged them $10 for it).

I sent them to annualcreditreport.com and told them I'd pull one report per agency in 60-90days and then do one every 4 months. I told them I'd keep this cycle forever as it's free and a great value to seeing your credit fully and catching mistakes immediately.

Obviously as well, don't go with the same PIN# again.

Anything else they should do? I thought new SSN, but everything I looked at says that is not possible without pretty major fraud going on.

Also anyone know the odds of getting nailed by these types after you have been compromised. I imagine all the data goes into a huge database somewhere.

Just an FYI as the coders have gotten smarter and sometimes even typing in the URL directly can get you phished.
 

rcpratt

Lifer
Jul 2, 2009
10,433
110
116
No, because I'm not an idiot. Asking for your SSN, driver's license, debit card #, and PIN, seriously? The PIN is a dead giveaway.

And of course, the requisite minimum of one spelling/grammar error ("drivers").
 

waggy

No Lifer
Dec 14, 2000
68,143
10
81
you would have to be a fucking idiot to enter that info. I am amazed when i read stuff like this.

As for what they should be doing it sounds like good advice.
 

darkxshade

Lifer
Mar 31, 2001
13,749
6
81
I think demo.chase was made by Chase to simulate what the virus would look like on the actual chase.com site when you visit it so they can put the screenshot up on their security faq. Unless you think they'd actually look for and download the virus to do it.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
No, because I'm not an idiot. Asking for your SSN, driver's license, debit card #, and PIN, seriously? The PIN is a dead giveaway.

And of course, the requisite minimum of one spelling/grammar error ("drivers").

You live in detroit though....
 

slayer202

Lifer
Nov 27, 2005
13,679
119
106
http://demo.chase.com <--- there's your problem

demo.chase.com is still chase.com

obviously no one should enter that sort of information online, but a popup over a real website is significantly more complex than fake website phishing. it could have easily been a popup just asking for your login info like you would enter when you normally go to the website.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
:thumbsup:

wow...idiots. Umm that is an image from www.chase.com...it was not a screen shot of the actual place.

Also to the other person above, I had them download Avast Home on another computer and do the boot scan. It found 9 infections, but I couldn't see where you can see the logs in the new version...it just gives a report of total scanned vs total infected.

I had them select delete all when it popped up.

Also sadly this was after scanning with MSE. Their MSE was also deactivated by the virus (or another virus).

They are pretty paranoid now. This has got to suck for someone.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
you would have to be a fucking idiot to enter that info. I am amazed when i read stuff like this.

As for what they should be doing it sounds like good advice.

If you read up on it, many have been affected. Outside of the DL # oddity, it looks just like the site was hosting the popup. It totally takes over the browser and integrates.

Some evil coding.

Most people wouldn't have a problem logging into their banking website and entering that information IMHO if asked. They'd have no reason to believe they were being exploited using their known GOOD bookmark. This is how probably 95% of the world operates.

The other 5% are like most of us that see this stuff everyday and got to learn that banks already got this information when you created the account so shouldn't have to ask again.

When you create most checking accounts you get asked your social, asked for your ID, asked to enter a pin in a machine...
 

RPD

Diamond Member
Jul 22, 2009
5,109
600
126
no, but I think he did your mom in one, just sayin' that's all.
Sounds like a smart guy, bones old old ladies and can't keep his CC information out of the wrong hands.

Man you have some real winners for friends.
:thumbsup:
 

xSauronx

Lifer
Jul 14, 2000
19,582
4
81
probably the sort of thing my dad would fall for, which is why ive had to implement parental controls in his home to try and mitigate these risks.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Oh, you are moving to Cuba? Because I have zero problems paying my bills.

For the record bro, until they returned my last payment about 12 months ago; I had made every payment properly and on time. Whether some clerical/computer/etc error or whatever happened, none of those payments were recorded by them into my loan.

They were paid a total of about $111,000 over those 48 months that I have nothing to show for. My 'current due' is about $350k when my original principal was $265k.

It wasn't even so much that my house tanked to $70-80k either.

The main reason was when the 5% and 6% fixed rate cards I had about $50k of school loans on, plus the other $30k of debt I had at around 7-9% went to 25% overnight and almost bankrupted me, and the mortgage company kept saying over and over "we will fix this, just give us more time" and then 1 month after calling me to tell me they located my payments and will finally get everything sorted out...they started the foreclosure against me.

Fortunately my home was burglarized and I was able to stroke a $30k check to the school loan balance, pull out a loan from my 401k and have my wife load up the rest at mostly 0%. I then majorly increased my salary over the next two years of that and elimated all but the last $10k that came from my surgery and a major car maintenace last month :)

I did nothing wrong in my payment of my mortgage, however; this bank's clusterfuck allows me an easy way out and also possible damages.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
probably the sort of thing my dad would fall for, which is why ive had to implement parental controls in his home to try and mitigate these risks.

The person in question is in their late 50's. They have been good in not turning of the antivirus and running full scans when they think they did something wrong.

To them the internut is now a more scary place. They are actually debating not using their computer anymore for anything financial. I told them in today's world that is pretty hard to do and that this kind of thing doesn't happen all the time.

I have no idea where they went that gave them the virus....they deleted all the history/cookies/temp files prior to me being able to review.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Sounds like a smart guy, bones old old ladies and can't keep his CC information out of the wrong hands.

Man you have some real winners for friends.
:thumbsup:

They are old too. Don't be mad bro...it's ok.
 

davmat787

Diamond Member
Nov 30, 2010
5,512
24
76
The person in question is in their late 50's. They have been good in not turning of the antivirus and running full scans when they think they did something wrong.

To them the internut is now a more scary place. They are actually debating not using their computer anymore for anything financial. I told them in today's world that is pretty hard to do and that this kind of thing doesn't happen all the time.

I have no idea where they went that gave them the virus....they deleted all the history/cookies/temp files prior to me being able to review.

LOL! But to be fair, it could have been one of the virii that deleted those files.